Lucene search

[email protected]CVE-2005-2605

HistoryAug 17, 2005 - 4:00 a.m.

CVE-2005-2605

2005-08-1704:00:00

[email protected]

web.nvd.nist.gov

vulnerability

lasso professional server8.0.4

lasso professional server8.0.5

bypass authentication

auth tags

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

Unknown vulnerability in Lasso Professional Server8.0.4 and 8.0.5 allows attackers to bypass authentication, related to [Auth] tags.

Affected configurations

NVD

Node

omnipilot_softwarelasso_professional_serverMatch8.0.4

omnipilot_softwarelasso_professional_serverMatch8.0.5

CPENameOperatorVersion
omnipilot_software:lasso_professional_serveromnipilot software lasso professional servereq8.0.4
omnipilot_software:lasso_professional_serveromnipilot software lasso professional servereq8.0.5

CPE	Name	Operator	Version
omnipilot_software:lasso_professional_server	omnipilot software lasso professional server	eq	8.0.4
omnipilot_software:lasso_professional_server	omnipilot software lasso professional server	eq	8.0.5

References

secunia.com/advisories/16364

www.omnipilot.com/Software%20Updates.1747.8901.lasso

www.securityfocus.com/bid/14543

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

Related for CVE-2005-2605

cvelist1 nvd1